Information Security Governance

Ralph Spencer Poore Principal consultant, Innovè LLC, and senior partner, Pi R Squared Consulting, LLP. Continuing a 30-plus year distinguished career in information security as an inventor, author, consultant, CISO, CTO, college instructor, and entrepreneur, he provides security, privacy, and compliance consulting services. He has published widely including articles on information security issues in the Information Security Management Handbook and in Information Systems Security, where he was a past consulting editor. He served in numerous capacities with (ISC) 2, including as a past international president, as founding chairman of the Test Development Committee, and as chairman of the Governance Committee. He currently serves on the Professional Conduct Committee, the CBK Committee, and the Americas Advisory Board.

Abstract

Before describing information security governance, we need at least an overview of corporate governance as a context. Fundamentally, corporate governance concerns the means by which managers are held accountable to stakeholders (e.g., investors, employees, society) for the use of assets and by which the firm's directors and managers act in the interests of the firm and these stakeholders. Corporate governance specifies the relationships between, and the distribution of rights and responsibilities among, the four main groups of participants in a corporate body:

Board of directors
Managers
Workers
Shareholders or owners

Reprints and Corporate Permissions

Please note: Selecting permissions does not provide access to the full text of the article, please see our help page How do I view content?

To request a reprint or corporate permissions for this article, please click on the relevant link below:

Order Reprints Request Corporate Permissions

Academic Permissions

Please note: Selecting permissions does not provide access to the full text of the article, please see our help page How do I view content?

Obtain permissions instantly via Rightslink by clicking on the button below:

Request Academic Permissions

If you are unable to obtain permissions via Rightslink, please complete and submit this Permissions form. For more information, please visit our Permissions help page.

Information Security Governance

Information for

Open access

Opportunities

Help and information

Information Security Governance

Abstract

Reprints and Corporate Permissions

Academic Permissions

Related research

To cite this article:

Download citation

Information for

Open access

Opportunities

Help and information

Keep up to date

Your download is now in progress and you may close this window

Login or register to access this feature